SecuritySpace - CVE-2016-9575

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-9575

Description: Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

Test IDs: 1.3.6.1.4.1.25623.1.0.882622 1.3.6.1.4.1.25623.1.0.871735

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9575
BugTraq ID: 95068
http://www.securityfocus.com/bid/95068
RedHat Security Advisories: RHSA-2017:0001
http://rhn.redhat.com/errata/RHSA-2017-0001.html

CVE ID:	CVE-2016-9575
Description:	Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.
Test IDs:	1.3.6.1.4.1.25623.1.0.882622 1.3.6.1.4.1.25623.1.0.871735
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9575 BugTraq ID: 95068 http://www.securityfocus.com/bid/95068 RedHat Security Advisories: RHSA-2017:0001 http://rhn.redhat.com/errata/RHSA-2017-0001.html